CVE-2024-6697: Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. (CWE-280)
Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not handle invalid and missing permissions correctly, resulting in a denial of service.
An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6697?
CVE-2024-6697 has been assessed as a significant risk due to improper handling of insufficient permissions, potentially leading to unexpected code execution.
How do I fix CVE-2024-6697?
To address CVE-2024-6697, update the Hitachi Vantara Pentaho Business Analytics Server to version 10.2.0.0 or later, or 9.3.0.9 or later.
What products are affected by CVE-2024-6697?
CVE-2024-6697 affects the Hitachi Vantara Pentaho Business Analytics Server versions 8.3.x through 10.2.0.0.
What are the consequences of CVE-2024-6697 exploitation?
Exploitation of CVE-2024-6697 can potentially allow unauthorized access to resources, leading to an invalid state of the application.
Is CVE-2024-6697 a common vulnerability?
CVE-2024-6697 represents a common type of security vulnerability related to insufficient privilege management in software applications.